0

What could cause commenting to suddenly not work for a particular channel if no changes to the configuration has been made? The person trying to comment gets the message "You are not authorized to perform this action". The EE version is 2.9.0 and there's been no upgrade between now and the last successful comment.

1
  • I am still having the same issue and would appreciate any insight. Commented Feb 19, 2015 at 0:24

2 Answers 2

1

If you are developing locally (e.g. using the “localhost” domain) you may get this security error on comments submission. To test commenting during local development, try to set "Require IP Address and User Agent for Posting" to "No" in Admin -> Security and Privacy -> Security and Sessions.

1
  • This is on a live site that has been live for a long time and where comments from guests have worked fine before. Commented Jan 16, 2015 at 14:02
0

The "You are not authorized to perform this action" error can occur under these two situations (in addition to other situations too):

  1. When EE determines that a posted comment is a duplicate. So if you keep posting a comment with "test" as the copy, EE will trigger the error.

  2. When a person submits a comment and then uses their back button to post a second comment.

12
  • It definitely wasn't 2. and I tested again to rule out 1. and it doesn't seem to be that either as it doesn't go through no matter what I write. Commented Feb 20, 2015 at 9:56
  • Check your config.php file... Do you see a setting for "secure_forms"? What is it set to?
    – Anna_MediaGirl
    Commented Feb 20, 2015 at 15:24
  • I don't seem to have a setting for secure_forms defined, no. Commented Feb 21, 2015 at 10:43
  • Try adding it and set to "n" and retest.
    – Anna_MediaGirl
    Commented Feb 21, 2015 at 13:52
  • Do I need to do anything after editing config.php to make sure it takes effect? If not, it didn't solve it, still getting the same error. Commented Feb 21, 2015 at 22:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.